Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.com#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| access.github.comvpn | Not in the scope | 2026-11-14 |
| www.access.github.comvpn | Not in the scope | 2026-11-14 |
| access1.github.comvpn | Not in the scope | 2026-11-14 |
| access2.github.comvpn | Not in the scope | 2026-11-14 |
| antivirus-vpn.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.api.github.comapi, vpn | Not in the scope | 2026-11-14 |
| sslvpn.api.github.comapi, vpn | Not in the scope | 2026-11-14 |
| vpn.api.github.comapi, vpn | Not in the scope | 2026-11-14 |
| vpn.central.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.github.comvpn | Not in the scope | 2026-11-14 |
| citrix1.github.comvpn | Not in the scope | 2026-11-14 |
| citrix2.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.classroom.github.comvpn | Not in the scope | 2026-11-14 |
| sslvpn.classroom.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.covid19.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.drvinceknight.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.education.github.comvpn | Not in the scope | 2026-11-14 |
| remote.education.github.comvpn | Not in the scope | 2026-11-14 |
| event-horizon.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.gist.github.comvpn | Not in the scope | 2026-11-14 |
| remote.gist.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.help.github.comvpn | Not in the scope | 2026-11-14 |
| remote.help.github.comvpn | Not in the scope | 2026-11-14 |
| sslvpn.help.github.comvpn | Not in the scope | 2026-11-14 |
| horizon.github.comvpn | Not in the scope | 2026-11-14 |
| vpn-ca.iad.github.comvpn | Not in the scope | 2026-11-14 |
| vpn1.iad.github.comvpn | Not in the scope | 2026-11-14 |
| vpn2.iad.github.comvpn | Not in the scope | 2026-11-14 |
| ic-asa5520-vpn-fw.github.comvpn | Not in the scope | 2026-11-14 |
| java-native-access.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.jobs.github.comvpn | Not in the scope | 2026-11-14 |
| remote.jobs.github.comvpn | Not in the scope | 2026-11-14 |
| sslvpn.jobs.github.comvpn | Not in the scope | 2026-11-14 |
| kesc-vpn.github.comvpn | Not in the scope | 2026-11-14 |
| citrix.lab.github.comvpn | Not in the scope | 2026-11-14 |
| remote.lab.github.comvpn | Not in the scope | 2026-11-14 |
| sslvpn.lab.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.lab.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.lfs.github.comvpn | Not in the scope | 2026-11-14 |
| openvpn.github.comvpn | Not in the scope | 2026-11-14 |
| pw.openvpn.github.comvpn | Not in the scope | 2026-11-14 |
| remote.docker.pkg.github.comtools, vpn | Not in the scope | 2026-11-14 |
| rdp.github.comvpn | Not in the scope | 2026-11-14 |
| rdweb.github.comvpn | Not in the scope | 2026-11-14 |
| remote.github.comvpn | Not in the scope | 2026-11-14 |
| www.remote.github.comvpn | Not in the scope | 2026-11-14 |
| remote1.github.comvpn | Not in the scope | 2026-11-14 |
| remote2.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.rs.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.sigmavirus24.github.comvpn | Not in the scope | 2026-11-14 |
| ssl-vpn.github.comvpn | Not in the scope | 2026-11-14 |
| sslvpn.github.comvpn | Not in the scope | 2026-11-14 |
| ul-asa5520-vpn-fw.github.comvpn | Not in the scope | 2026-11-14 |
| vdi.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.virus.github.comvpn | Not in the scope | 2026-11-14 |
| vpn.github.comvpn | Not in the scope | 2026-11-14 |
| vpn-covid19.github.comvpn | Not in the scope | 2026-11-14 |
| vpn-test.github.comtest, vpn | Not in the scope | 2026-11-14 |
| vpn-uk.github.comvpn | Not in the scope | 2026-11-14 |
| antivirus.vpn.github.comvpn | Not in the scope | 2026-11-14 |
| covid19.vpn.github.comvpn | Not in the scope | 2026-11-14 |
| sigmavirus24.vpn.github.comvpn | Not in the scope | 2026-11-14 |
| virus.vpn.github.comvpn | Not in the scope | 2026-11-14 |
| www.vpn.github.comvpn | Not in the scope | 2026-11-14 |
| vpn01.github.comvpn | Not in the scope | 2026-11-14 |
| vpn02.github.comvpn | Not in the scope | 2026-11-14 |
| vpn1.github.comvpn | Not in the scope | 2026-11-14 |
| vpn2.github.comvpn | Not in the scope | 2026-11-14 |
| vpn3.github.comvpn | Not in the scope | 2026-11-14 |
| vpn4.github.comvpn | Not in the scope | 2026-11-14 |
| vpn5.github.comvpn | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.